ARM11 kernel virtual address mappings for these registers varies for different builds.
ARM11 kernel virtual address mappings for these registers varies for different builds.
+
+
=0x10012000=
+
Keys seem to be stored here? Access to this region is disabled once Kernel9 crt0 writes 0x2 to [[CONFIG|REG_SYSPROT9]]. Before writing that bit, Kernel9 copies the low u32 for the TWL keydata to +0x100. On devunits([[CONFIG|UNITINFO]]!=0) Kernel9 uses the first 8-bytes from 0x10012000 for the TWL keydata.
+
+
This region is also used by the [[New_3DS]] FIRM loader at the end of the [[FIRM]] ARM9 binary.